48159da209219bf478737bab864ab8bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

48159da209219bf478737bab864ab8bb
Size

30KB
MD5

48159da209219bf478737bab864ab8bb
SHA1

95d2511c9835b3f646b2ccf22adebe4513f405fe
SHA256

a1a0dc61902e41866d7ee43cdccebd3a96d2b7d081de61579867906948d02190
SHA512

05a793a7b96063c041703e57279b82b7690c60036ff8e7fcbefcb85fbb15735ce7777451c9257934b9191b1235d8d26d494660951eeef3fc0db97ba02753c0b1
SSDEEP

192:MEMkhpsiktP1oynT2J4SW7MXsnKSksLFvCPpYY7TcWO49ObS177T2cMqQdP6:QkhJkZ1s47M8KOo3p9ObgWcDAP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
48159da209219bf478737bab864ab8bb

Files

48159da209219bf478737bab864ab8bb
.exe windows:4 windows x86 arch:x86

5a27b829525a3db2fe7d482bf64260a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
LCMapStringA
HeapAlloc
UnlockFile
MoveFileA
GetPriorityClass
ConvertDefaultLocale
GetModuleHandleA
GetStartupInfoA

user32

IsIconic

comdlg32

ChooseFontA

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE